1 1. A processing system for executing an original computer program with a first portion of 

2 the original computer program executing in a first processor located at a first processing site and 

3 a second portion of the original computer program executing in a second different processor 

4 located at a second different processing site wherein the first and second processing sites are 

5 physically separate and adapted to communicate over a network, the second processor at the 

6 second processing site comprising: 

7 (a) a code extraction processor to receive the original computer program and to parse the 

8 original computer program to provide a first program for execution at the first processing site 

9 and an associated second program for execution at the second processing site, wherein said code 

10 extraction processor provides the second program such that the second program does not by itself 

1 1 constitute an executable computer program and wherein the second program includes portions of 
J12 the original computer program selected to render it difficult to re-create the functionality of the 
fl3 original computer program from information stored at or otherwise available at the first 

=14 processing site; 

ill 5 (b) a storage device having stored therein a server program which utilizes the second 

jl6 program and wherein in response to communications provided thereto by the first program 

17 executing at the first processing site, the server program provides information over the network 

nl8 to the first processing site which allows the first program executing at the first processing site to 

Jl9 re-create the functionality of the original computer program at the first processing site; and 

]20 (c) an execution processor to execute the server program and the second program at the 

"21 second processing site. 

1 2. The system of claim 1 wherein: said code extraction processor processes the original 

2 computer program to extract a plurality of different second programs from the original computer 

3 program to provide a like plurality of different first programs with each of the plurality of first 

4 programs intended to be transmitted to a different one of a plurality of first processing sites and 

5 each of the second program portions intended to be utilized by the server program and executed 

6 by the execution processor at the second processing site, wherein the server program provides 

7 information to each particular one of the plurality of first processing sites utilizing the second 
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8 program associated with the particular first program executing at the particular one of the 

9 plurality of first processing sites and said system further comprises: 

10 a plurality of communication paths, each of the communication paths coupled 

1 1 between a particular one of the plurality of first processing sites and the particular server 

12 program utilizing the associated second program portion and wherein the server program 

13 manages the communication between the first program and the second program 

14 associated with the particular first program during execution of the first program. 

13. A processing system for executing an original software program, the processing system 

2 comprising: 

3 (a) a first processor located at the first processing site, to execute a first program which 

4 corresponds to a first portion of an original software program; 

5 (b) a second processor located at the second processing site which is physically separated from 

6 the first processing site, the second processor for executing a second program which 

7 corresponds to a second portion of the original software program where the first and second 

8 programs combined correspond to the entire original software program; 

9 (c) a communications network coupled between the first and second processing sites and through 

10 which said first processor communicates with said second processor; and 

1 1 (d) means for transmitting information between said first processor and said second processor 

12 over said communications network. 
1 

1 4. The system of Claim 3 further comprising a processor for executing a vendor server 

2 program which utilizes the second program and communicates with the first program. 

1 5. The system of Claim 4 wherein: 

2 the first processing site corresponds to a first lessee site with the first lessee site 

3 corresponding to a first one of a plurality of lessee sites, each of the plurality of lessee sites 

4 having a first program adapted to execute thereon; 

5 the second processing site corresponds to a vendor site; and 

6 the vendor server program communicates with the first program in each of the plurality of 

7 lessee sites. 
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1 6. The system of Claim 3 wherein said second processing site comprises means for 

2 controlling the first program executing at the first processing site by stopping and starting 

3 communications between the first and second programs. 

1 7. The system of Claim 6 wherein said means for controlling the first program executing at 

2 the first processing site comprises means for halting the execution of the first program at the first 

3 processing site by not providing the functionality necessary for the first program to execute. 

1 8. The system of Claim 3 wherein communication between the first program and the second 

2 program across said communications network is input dependent. 

19. A processing system for executing an original software program, the processing system 

2 comprising: 

3 (a) a first processor located at the first processing site, to execute a first program which 

4 corresponds to a first portion of an original software program, said first processor having a 

5 bus operating at a first bus speed; 

6 (b) a second processor located at the second processing site which is physically separated from 

7 the first processing site, the second processor for executing a second program which 

8 corresponds to a second portion of the original software program where the first and second 

9 programs combined correspond to the entire original software program, said first processor 

10 having a bus operating at a second bus speed; 

11 (c) a communications network coupled between the first and second processing sites and through 

12 which said first processor communicates with said second processor, said communications 

13 network operating at a third speed wherein the third speed is slower than the speed at which 

14 the fist and second buses operate; and 

15 (d) means for transmitting information between said first processor and said second processor 

16 over said communications network. 

1 10. The system of Claim 9 wherein said second processing site comprises means for 

2 controlling the first program executing at the first processing site by stopping and starting 

3 communications between the first and second programs. 
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1 11. The system of Claim 10 wherein said means for controlling the first program executing at 

2 the first processing site comprises means for halting the execution of the first program at the first 

3 processing site. 

1 12. The system of Claim 10 wherein communication between the first program and the 

2 second program across said communications network is input dependent. 

1 13. The system of Claim 10 further comprising a code extraction processor to receive the 

2 original software program and to parse the original software program to provide the first program 

3 and the second program. 

1 14. The system of Claim 10 further comprising a processor for executing a vendor server 

2 program which utilizes the second program and communicates with the first program. 

1 15. The system of Claim 14 wherein: 

2 the first processing site corresponds to a first lessee site with the first lessee site 

3 corresponding to a first one of a plurality of lessee sites, each of the plurality of lessee sites 

4 having a first program adapted to execute thereon; 

5 the second processing site corresponds to a vendor site; and 

6 the vendor server program communicates with the first program in each of the plurality of 

7 lessee sites. 
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ABSTRACT 



A secure software system includes a transformation processor for transforming 
an original program capable of being executed on a lessee site into a vendor server 

5 program, a first program intended to be executed at the lessee site which lacks some of 
the functionality of the original program and a second program. The first program 
provides some of the computation of the original program but is unable to provide all of 
the functionality of the Original Program and requires cooperation with the second 
program which corresponds to an excised portion of the original program to provide the 

10 functionality of original program. The excised program is executed or otherwise 
utilized by a vendor server program which, in one embodiment, is generated by the 
transformation processor. With this arrangement, the lessee obtains the total 
functionality of the original program without having access to the original program 
code and the excised program is selected such that it would be relatively difficult to 

15 recreate the total functionality of the original program. 
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1 1. A processing system for executing an original computer program with a first portion of 

2 the original computer program executing in a first processor located at a first processing site and 

3 a second portion of the original computer program executing in a second different processor 

4 located at a second different processing site wherein the first and second processing sites are 

5 physically separate and adapted to communicate over a network, the second processor at the 

6 second processing site comprising: 

7 (a) a code extraction processor to receive the original computer program and to parse the 

8 original computer program to provide a first program for execution at the first processing site 

9 and an associated second program for execution at the second processing site, wherein said code 

10 extraction processor provides the second program such that the second program does not by itself 

1 1 constitute an executable computer program and wherein the second program includes portions of 

12 the original computer program selected to render it difficult to re-create the functionality of the 

13 original computer program from information stored at or otherwise available at the first 

14 processing site; 

15 (b) a storage device having stored therein a server program which utilizes the second 

16 program and wherein in response to communications provided thereto by the first program 

17 executing at the first processing site, the server program provides information over the network 

18 to the first processing site which allows the first program executing at the first processing site to 

19 re-create the functionality of the original computer program at the first processing site; and 

20 (c) an execution processor to execute the server program and the second program at the 

21 second processing site. 

1 2. The system of claim 1 wherein: said code extraction processor processes the original 

2 computer program to extract a plurality of different second programs from the original computer 

3 program to provide a like plurality of different first programs with each of the plurality of first 

4 programs intended to be transmitted to a different one of a plurality of first processing sites and 

5 each of the second program portions intended to be utilized by the server program and executed 

6 by the execution processor at the second processing site, wherein the server program provides 

7 information to each particular one of the plurality of first processing sites utilizing the second 
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8 program associated with the particular first program executing at the particular one of the 

9 plurality of first processing sites and said system further comprises: 

10 a plurality of communication paths, each of the communication paths coupled 

1 1 between a particular one of the plurality of first processing sites and the particular server 

12 program utilizing the associated second program portion and wherein the server program 

13 manages the communication between the first program and the second program 

14 associated with the particular first program during execution of the first program. 

13. A processing system for executing an original software program, the processing system 

2 comprising: 

3 (a) a first processor located at the first processing site, to execute a first program which 

4 corresponds to a first portion of an original software program; 

5 (b) a second processor located at the second processing site which is physically separated from 
□ 6 the first processing site, the second processor for executing a second program which 
rt 1 corresponds to a second portion of the original software program where the first and second 
4= 8 programs combined correspond to the entire original software program; 

m 9 (c) a communications network coupled between the first and second processing sites and through 
^jlO which said first processor communicates with said second processor; and 

s 11 (d) means for transmitting information between said first processor and said second processor 
~;: r ;12 over said communications network. 

y 1 

H 1 4, The system of Claim 3 further comprising a processor for executing a vendor server 

?=K 2 program which utilizes the second program and communicates with the first program. 

1 5. The system of Claim 4 wherein: 

2 the first processing site corresponds to a first lessee site with the first lessee site 

3 corresponding to a first one of a plurality of lessee sites, each of the plurality of lessee sites 

4 having a first program adapted to execute thereon; 

5 the second processing site corresponds to a vendor site; and 

6 the vendor server program communicates with the first program in each of the plurality of 

7 lessee sites. 
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1 6. The system of Claim 3 wherein said second processing site comprises means for 

2 controlling the first program executing at the first processing site by stopping and starting 

3 communications between the first and second programs. 

1 7. The system of Claim 6 wherein said means for controlling the first program executing at 

2 the first processing site comprises means for halting the execution of the first program at the first 

3 processing site by not providing the functionality necessary for the first program to execute. 

1 8. The system of Claim 3 wherein communication between the first program and the second 

2 program across said communications network is input dependent. 

1 9. A processing system for executing an original software program, the processing system 

2 comprising: 

3 (a) a first processor located at the first processing site, to execute a first program which 

4 corresponds to a first portion of an original software program, said first processor having a 

5 bus operating at a first bus speed; 

6 (b) a second processor located at the second processing site which is physically separated from 

7 the first processing site, the second processor for executing a second program which 

8 corresponds to a second portion of the original software program where the first and second 

9 programs combined correspond to the entire original software program, said first processor 

10 having a bus operating at a second bus speed; 

11 (c) a communications network coupled between the first and second processing sites and through 

12 which said first processor communicates with said second processor, said communications 

13 network operating at a third speed wherein the third speed is slower than the speed at which 

14 the fist and second buses operate; and 

15 (d) means for transmitting information between said first processor and said second processor 

16 over said communications network. 

1 10. The system of Claim 9 wherein said second processing site comprises means for 

2 controlling the first program executing at the first processing site by stopping and starting 

3 communications between the first and second programs. 
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1 11. The system of Claim 10 wherein said means for controlling the first program executing at 

2 the first processing site comprises means for halting the execution of the first program at the first 

3 processing site. 

1 12. The system of Claim 10 wherein communication between the first program and the 

2 second program across said communications network is input dependent. 

1 13 . The system of Claim 1 0 further comprising a code extraction processor to receive the 

2 original software program and to parse the original software program to provide the first program 

3 and the second program. 

1 14. The system of Claim 10 further comprising a processor for executing a vendor server 

2 program which utilizes the second program and communicates with the first program. 

1 15. The system of Claim 14 wherein: 

2 the first processing site corresponds to a first lessee site with the first lessee site 

3 corresponding to a first one of a plurality of lessee sites, each of the plurality of lessee sites 

4 having a first program adapted to execute thereon; 

5 the second processing site corresponds to a vendor site; and 

6 the vendor server program communicates with the first program in each of the plurality of 

7 lessee sites. 
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